Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QONYGt3WuZ3YdEueKIb7sCrpGOM.cer
File: QONYGt3WuZ3YdEueKIb7sCrpGOM.cer (raw, json)
Hash identifier: ZEELw4QTpCH05DMaSfexo7rOsWovG1x0z8n8rksLhJo=
Subject key identifier: 40:E3:58:1A:DD:D6:B9:9D:D8:74:4B:9E:28:86:FB:B0:2A:E9:18:E3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC42517D8B89A17B29BC8BB33053DA679
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 08:30:14 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 198257
IP: 185.153.0.0/22
IP: 2a03:aee0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:17:d8:b8:9a:17:b2:9b:c8:bb:33:05:3d:a6:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 08:30:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=40e3581addd6b99dd8744b9e2886fbb02ae918e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:53:6b:73:01:7b:e1:5d:c0:5c:6b:b9:b7:27:
78:eb:66:b4:1e:c9:ab:eb:b7:c6:52:c3:53:67:be:
74:a6:58:b3:ab:a1:17:d2:85:7f:a2:c6:0c:da:40:
88:de:88:91:b8:85:a7:74:be:af:4d:47:37:cf:aa:
e4:68:99:5c:15:f5:0c:5a:af:ee:ce:4d:ab:50:7b:
9e:c2:70:0b:0a:16:71:ba:3b:6d:8e:94:9c:4c:1d:
04:f0:d7:58:4c:22:ea:dc:56:05:c0:f0:6c:d1:6f:
4e:a6:98:a4:30:90:7a:10:f6:eb:4c:59:e8:21:fd:
35:d9:fa:16:d4:d9:33:96:65:63:1c:5b:23:25:5f:
84:cb:e7:39:8e:a3:da:28:d0:e8:80:8c:92:b5:84:
ef:3c:49:8a:96:4f:9c:77:54:79:3d:84:b5:55:1d:
5c:b1:3c:be:7a:d9:c5:ae:19:34:15:e5:4c:81:54:
d7:23:d3:88:62:e1:d2:50:dd:43:64:ed:94:9f:34:
af:b7:b1:ce:29:71:2c:2f:12:f4:c9:ca:46:0e:eb:
eb:ab:28:3d:80:9a:50:0b:0b:7a:2a:74:2d:df:fe:
e8:2a:5e:3a:f4:46:ab:d6:e7:fa:e0:7b:fa:83:f0:
49:af:10:a2:25:67:1b:1b:e9:92:f4:e7:55:04:a3:
f6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:E3:58:1A:DD:D6:B9:9D:D8:74:4B:9E:28:86:FB:B0:2A:E9:18:E3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/551522-7afc-4886-bae6-fc59dedb1d2b/1/QONYGt3WuZ3YdEueKIb7sCrpGOM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.153.0.0/22
IPv6:
2a03:aee0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198257
Signature Algorithm: sha256WithRSAEncryption
6f:ae:48:d0:f0:33:9e:6b:40:84:6f:06:93:17:78:7f:0d:ab:
e2:13:3b:81:51:46:dc:4e:89:38:a9:05:35:c0:73:cb:0e:08:
c2:d4:79:91:e8:0f:f2:b8:5e:82:3b:db:18:79:d0:df:e0:36:
64:e5:02:29:ec:5d:28:cf:c5:6b:f3:08:04:9b:2b:e4:66:22:
2b:e4:f4:cf:c0:38:6d:7e:f8:e7:49:f7:d2:f3:8d:db:6f:e0:
98:4a:12:f5:f9:c3:da:ce:0b:d6:44:4c:4f:89:80:6f:4f:a2:
f5:68:d2:98:99:e6:c2:2f:33:00:2d:e9:30:31:9e:bb:91:41:
7b:8b:7d:77:75:ad:9c:8a:5a:e2:ab:e2:85:f1:23:c1:b6:0d:
9b:26:b9:0a:40:c4:37:28:f0:8e:44:3e:d2:12:db:32:50:d3:
6a:80:27:8d:81:78:da:6c:18:7f:79:5f:da:47:ef:21:01:6e:
35:f4:af:5d:18:38:fd:57:b0:f2:5c:a9:8e:d5:42:fc:fa:3b:
f7:ea:8f:9f:e2:3b:3e:e1:17:ec:5e:81:f8:21:f7:13:6b:da:
fc:16:c4:17:c5:6c:ef:78:5a:e0:0e:07:88:80:96:55:10:de:
40:b1:e0:a8:5e:99:38:3a:a5:f0:7a:d0:bc:81:5f:86:69:e3:
2a:04:26:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:44:17 2024 by rpki-client on console-ams.rpki-client.org